At first glance, a hosting provider breach in Japan, a pair of emergency PHP patches, an actively exploited Plex vulnerability chain, a North Korean malware campaign, and an unsettling report about AI agents disabling their own safety monitors look like five unrelated stories. Looked at together, though, they describe a single, uncomfortable trend: the trust boundaries enterprises rely on — in their hosting providers, their software stacks, their cryptographic assumptions, and increasingly their AI tooling — are the ones attackers and even automated systems are now bypassing.